@rubytech/create-maxy-code 0.1.125 → 0.1.126

package/payload/platform/package.json

@@ -6,8 +6,8 @@
     "services/*"
   ],
   "scripts": {
-    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
-    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json",
+    "build": "tsc -p lib/models/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json && tsc -p services/claude-session-manager/tsconfig.json && NODE_OPTIONS='--max-old-space-size=8192' tsc -b plugins/*/mcp/tsconfig.json",
+    "build:lib": "tsc -p lib/models/tsconfig.json && tsc -p lib/oauth-llm/tsconfig.json && tsc -p lib/mcp-stderr-tee/tsconfig.json && tsc -p lib/mcp-spawn-tee/tsconfig.json && tsc -p lib/mcp-eager/tsconfig.json && tsc -p lib/account-enumeration/tsconfig.json && tsc -p lib/graph-write/tsconfig.json && tsc -p lib/graph-mcp/tsconfig.json && tsc -p lib/graph-trash/tsconfig.json && tsc -p lib/admin-conversation-purge/tsconfig.json && tsc -p lib/graph-search/tsconfig.json && tsc -p lib/graph-style/tsconfig.json && tsc -p lib/screening-patterns/tsconfig.json && tsc -p lib/device-url/tsconfig.json && tsc -p lib/brand-templating/tsconfig.json && tsc -p lib/entitlement/tsconfig.json && tsc -p lib/task-secrets/tsconfig.json && tsc -p lib/admins-write/tsconfig.json && tsc -p lib/persistent-components/tsconfig.json && tsc -p lib/require-port-env/tsconfig.json",
     "build:memory": "tsc -p plugins/memory/mcp/tsconfig.json",
     "build:contacts": "tsc -p plugins/contacts/mcp/tsconfig.json",
     "build:telegram": "tsc -p plugins/telegram/mcp/tsconfig.json",
@@ -19,6 +19,7 @@
     "build:workflows": "tsc -p plugins/workflows/mcp/tsconfig.json",
     "build:stubs": "tsc -p plugins/scheduling/mcp/tsconfig.json",
     "build:replicate": "tsc -p plugins/replicate/mcp/tsconfig.json",
+    "build:graph-viewer": "tsc -p plugins/graph-viewer/mcp/tsconfig.json",
     "build:claude-session-manager": "tsc -p services/claude-session-manager/tsconfig.json"
   }
 }

package/payload/platform/plugins/.claude-plugin/marketplace.json

@@ -44,6 +44,11 @@
       "source": "./email",
       "version": "0.1.0"
     },
+    {
+      "name": "graph-viewer",
+      "source": "./graph-viewer",
+      "version": "0.1.0"
+    },
     {
       "name": "linkedin-extension",
       "source": "./linkedin-extension",

package/payload/platform/plugins/docs/references/visitor-graph.md

@@ -50,10 +50,11 @@ All under the `real-agent-buyers` plugin, admin-side only:
 | `visitor-recent-by-person` | Recent sessions for a known `:Person` (morning round, 1:1 prep). |
 | `visitor-recent-by-page` | Recent visitors of a given listing slug or URL. |
 | `visitor-engagement-score` | Engagement-ranked `:Person` list (nurture queue). |
-| `visitor-recommendation-ctr` | Graph-backed CTR over a window. Replaces the Task 336 log-scan after the 14-day parity cutover. |
+| `visitor-recommendation-ctr` | Graph-backed CTR over a window, joined from `:Recommendation` and `:Click` nodes. |
 | `visitor-session-detail` | Full event timeline for one `:Session`. |
 | `visitor-event-ingest` | Admin companion to `POST /v/event` for test harness work. |
-| `visitor-backfill-from-logs` | One-shot importer: parses `[property-recommended]` and `[property-card-click]` log lines, computes a parity check, populates the graph. |
+| `visitor-backfill-from-logs` | One-shot importer: parses `[property-recommended]` and `[property-card-click]` log lines into the graph; used to recover late-arriving sessions and for ad-hoc forensics. |
+| `mint-visitor-token` | Mints a signed token bound to a `:Person` for outbound URLs in `morning-round`, `lead-nurturing`, `vendor-updates`. Returns `{ token, expiryMs }`; the agent appends `&v=<token>` to `/listings/<slug>/click?session=<sk>`. Same secret file as the UI server; both processes share it via the wx-create pattern. (Task 362) |
 
 ## Privacy
 
@@ -70,7 +71,7 @@ Quick checks the operator can run after deployment:
 1. Load a published listing page; grep `[visitor-event] type=pageview` in `server.log` within 1s.
 2. Scroll past 50%; grep `[visitor-event] type=scroll depth=50`.
 3. Click an element marked `data-track="floorplan"`; grep `[visitor-event] type=click label=floorplan`.
-4. Run `visitor-backfill-from-logs` over the existing Task 336 log window; the response includes `parityCheck=ok` when graph CTR matches log-scan CTR exactly.
+4. Run `visitor-backfill-from-logs` over a log window where live writes were lost (process restart, etc.); the response reports `recWritten` and `clickWritten` counts. Subsequent runs over the same window are idempotent for `:Recommendation` and append-only for `:Click`.
 
 ## Failure signals
 

package/payload/platform/plugins/graph-viewer/.claude-plugin/plugin.json

@@ -0,0 +1,8 @@
+{
+  "name": "graph-viewer",
+  "description": "Inline Neo4j subgraph renderer. Provides graph-render — a Node-side PNG renderer that walks N hops from a starting node, applies the same palette and display strings the live /graph page uses, and returns the image as an MCP image content block. Removes the device-switch otherwise required for the agent to show the operator what a subgraph looks like. Account-scoped: the tool refuses to render nodes outside the caller's accountId. Layout is d3-force with a deterministic seed; drawing is @napi-rs/canvas with a system-font fallback for labels. The fidelity contract is palette and display-string parity — node positions will differ from the live page's vis-network layout. Ships one skill: render-graph.",
+  "version": "0.1.0",
+  "author": {
+    "name": "Rubytech LLC"
+  }
+}

package/payload/platform/plugins/graph-viewer/PLUGIN.md

@@ -0,0 +1,56 @@
+---
+name: graph-viewer
+mcp:
+  command: node
+  args:
+    - ${PLATFORM_ROOT}/lib/mcp-spawn-tee/dist/index.js
+    - ${PLATFORM_ROOT}/plugins/graph-viewer/mcp/dist/index.js
+  env:
+    MCP_SPAWN_TEE_NAME: graph-viewer
+    LOG_DIR: ${LOG_DIR}
+    PLATFORM_ROOT: ${PLATFORM_ROOT}
+    ACCOUNT_ID: ${ACCOUNT_ID}
+    SESSION_ID: ${SESSION_ID}
+mcp-manifest: skip
+description: "Inline Neo4j subgraph renderer. Provides graph-render — a Node-side PNG renderer that walks N hops from a starting node, applies the same palette and display strings the live /graph page uses, and returns the image as an MCP image content block. Removes the device-switch otherwise required for the agent to show the operator what a subgraph looks like. Account-scoped: the tool refuses to render nodes outside the caller's accountId. Layout is d3-force with a deterministic seed; drawing is @napi-rs/canvas with a system-font fallback for labels. The fidelity contract is palette and display-string parity — node positions will differ from the live page's vis-network layout. Ships one skill: render-graph."
+tools:
+  - name: graph-render
+    publicAllowlist: false
+    adminAllowlist: true
+---
+
+# graph-viewer
+
+## What it does
+
+A single MCP tool, `graph-render`, takes a Neo4j node ID and a hop depth and
+returns an inline PNG of the subgraph rooted at that node. The agent
+attaches the PNG to its reply so the operator can see the graph without
+opening the admin UI on a different device.
+
+## Why it exists
+
+Before this plugin, the agent had no way to ship the operator a picture
+of a subgraph from inside chat. Mermaid and ASCII substitutes were
+illegible and bore no resemblance to the live `/graph` page. Operators
+otherwise had to leave the chat surface, open the admin UI on whatever
+device hosts it, and re-find the same subgraph by hand.
+
+## Surface boundaries
+
+- `graph-render` only accepts a `nodeId + hopDepth` query shape. Arbitrary
+  Cypher is not supported and is filed as a follow-up task.
+- Pixel-equivalence with `/graph` is not a goal. The layout engine is
+  d3-force, not the live page's vis-network port; node positions will
+  differ. The colour palette, label precedence, and short-label strings
+  are shared with `/graph` via `platform/lib/graph-style/`.
+- Subgraphs above 200 nodes return a truncation envelope alongside the
+  capped render.
+- `:Trashed` nodes are filtered out, matching `memory-search`'s contract.
+
+## Enabling
+
+The plugin is auto-discovered from `platform/plugins/`. Each operator
+account must list `graph-viewer` in its `enabledPlugins` (use the admin
+`plugin-toggle-enabled` MCP tool) before `graph-render` appears in the
+agent's tool surface.

package/payload/platform/plugins/graph-viewer/mcp/dist/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * MCP server entrypoint for the graph-viewer plugin. Registers one tool,
+ * `graph-render`, on the standard stdio transport. Account-scoping is
+ * enforced inside the tool handler against the caller-supplied accountId.
+ */
+export {};
+//# sourceMappingURL=index.d.ts.map

package/payload/platform/plugins/graph-viewer/mcp/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG"}

package/payload/platform/plugins/graph-viewer/mcp/dist/index.js

@@ -0,0 +1,74 @@
+/**
+ * MCP server entrypoint for the graph-viewer plugin. Registers one tool,
+ * `graph-render`, on the standard stdio transport. Account-scoping is
+ * enforced inside the tool handler against the caller-supplied accountId.
+ */
+import { initStderrTee } from "../../../../lib/mcp-stderr-tee/dist/index.js";
+initStderrTee("graph-viewer");
+import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import { eagerTool } from "../../../../lib/mcp-eager/dist/index.js";
+import { z } from "zod";
+import { graphRender } from "./tools/graph-render.js";
+import { closeDriver } from "./lib/neo4j.js";
+const server = new McpServer({
+    name: "maxy-graph-viewer",
+    version: "0.1.0",
+});
+eagerTool(server, "graph-render", "Render an inline PNG of an account-scoped Neo4j subgraph rooted at a given nodeId, walking up to hopDepth hops (0-3). Returns the image as an MCP image content block, using the same colour palette and short-label strings as the live /graph page. Node positions differ from /graph (the renderer is d3-force, not vis-network). Subgraphs above 200 nodes are capped and return a truncated={rendered,total} envelope. Trashed nodes are excluded. Use when the operator asks to see what a subgraph looks like and you want to avoid making them switch to the admin UI on a different device.", {
+    accountId: z.string().min(1).describe("Operator account id. The root nodeId must belong to this account or the tool refuses with reason=scope."),
+    nodeId: z.string().min(1).describe("elementId of the root node, as returned by memory-search or other graph tools."),
+    hopDepth: z.number().int().min(0).max(3).describe("Number of hops to walk from the root (0 = just the root). Max 3."),
+}, async (args) => {
+    const result = await graphRender(args);
+    if (!result.ok) {
+        return {
+            isError: true,
+            content: [
+                {
+                    type: "text",
+                    text: JSON.stringify({ ok: false, reason: result.reason, message: result.message }, null, 2),
+                },
+            ],
+        };
+    }
+    const envelope = {
+        ok: true,
+        width: result.width,
+        height: result.height,
+        nodeCount: result.nodeCount,
+        edgeCount: result.edgeCount,
+    };
+    if (result.truncated)
+        envelope.truncated = result.truncated;
+    return {
+        content: [
+            {
+                type: "image",
+                data: result.pngBase64,
+                mimeType: "image/png",
+            },
+            {
+                type: "text",
+                text: JSON.stringify(envelope, null, 2),
+            },
+        ],
+    };
+});
+async function main() {
+    const transport = new StdioServerTransport();
+    await server.connect(transport);
+}
+main().catch((err) => {
+    console.error("[graph-viewer] fatal:", err);
+    process.exit(1);
+});
+process.on("SIGINT", async () => {
+    await closeDriver();
+    process.exit(0);
+});
+process.on("SIGTERM", async () => {
+    await closeDriver();
+    process.exit(0);
+});
+//# sourceMappingURL=index.js.map

package/payload/platform/plugins/graph-viewer/mcp/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,8CAA8C,CAAC;AAC7E,aAAa,CAAC,cAAc,CAAC,CAAC;AAE9B,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,yCAAyC,CAAC;AACpE,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC;IAC3B,IAAI,EAAE,mBAAmB;IACzB,OAAO,EAAE,OAAO;CACjB,CAAC,CAAC;AAEH,SAAS,CACP,MAAM,EACN,cAAc,EACd,skBAAskB,EACtkB;IACE,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,yGAAyG,CAAC;IAChJ,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,gFAAgF,CAAC;IACpH,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,kEAAkE,CAAC;CACtH,EACD,KAAK,EAAE,IAA6D,EAAE,EAAE;IACtE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;QACf,OAAO;YACL,OAAO,EAAE,IAAI;YACb,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAe;oBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAC7D,IAAI,EACJ,CAAC,CACF;iBACF;aACF;SACF,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,GAA4B;QACxC,EAAE,EAAE,IAAI;QACR,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC;IACF,IAAI,MAAM,CAAC,SAAS;QAAE,QAAQ,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;IAC5D,OAAO;QACL,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,OAAgB;gBACtB,IAAI,EAAE,MAAM,CAAC,SAAS;gBACtB,QAAQ,EAAE,WAAW;aACtB;YACD;gBACE,IAAI,EAAE,MAAe;gBACrB,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;aACxC;SACF;KACF,CAAC;AACJ,CAAC,CACF,CAAC;AAEF,KAAK,UAAU,IAAI;IACjB,MAAM,SAAS,GAAG,IAAI,oBAAoB,EAAE,CAAC;IAC7C,MAAM,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;AAClC,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,uBAAuB,EAAE,GAAG,CAAC,CAAC;IAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AAEH,OAAO,CAAC,EAAE,CAAC,QAAQ,EAAE,KAAK,IAAI,EAAE;IAC9B,MAAM,WAAW,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC;AACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,KAAK,IAAI,EAAE;IAC/B,MAAM,WAAW,EAAE,CAAC;IACpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/graph-viewer/mcp/dist/lib/neo4j.d.ts

@@ -0,0 +1,5 @@
+import { type Driver, type Session } from "neo4j-driver";
+export declare function getDriver(): Driver;
+export declare function getSession(): Session;
+export declare function closeDriver(): Promise<void>;
+//# sourceMappingURL=neo4j.d.ts.map

package/payload/platform/plugins/graph-viewer/mcp/dist/lib/neo4j.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j.d.ts","sourceRoot":"","sources":["../../src/lib/neo4j.ts"],"names":[],"mappings":"AAAA,OAAc,EAAE,KAAK,MAAM,EAAE,KAAK,OAAO,EAAE,MAAM,cAAc,CAAC;AAwBhE,wBAAgB,SAAS,IAAI,MAAM,CAgBlC;AAED,wBAAgB,UAAU,IAAI,OAAO,CAEpC;AAED,wBAAsB,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC,CAKjD"}

package/payload/platform/plugins/graph-viewer/mcp/dist/lib/neo4j.js

@@ -0,0 +1,43 @@
+import neo4j from "neo4j-driver";
+import { readFileSync } from "node:fs";
+import { resolve } from "node:path";
+let driver = null;
+function readPassword() {
+    if (process.env.NEO4J_PASSWORD)
+        return process.env.NEO4J_PASSWORD;
+    // Five segments up from the compiled file
+    // (`platform/plugins/graph-viewer/mcp/dist/lib/neo4j.js`) reaches
+    // `platform/`, where the installer writes `config/.neo4j-password`.
+    const passwordFile = resolve(process.env.PLATFORM_ROOT ?? resolve(import.meta.dirname, "../../../../.."), "config/.neo4j-password");
+    try {
+        return readFileSync(passwordFile, "utf-8").trim();
+    }
+    catch {
+        throw new Error(`Neo4j password not found. Expected at ${passwordFile} or in NEO4J_PASSWORD env var.`);
+    }
+}
+export function getDriver() {
+    if (!driver) {
+        // Refuse to default the URI — silent localhost:7687 has historically
+        // crossed brand boundaries on shared devices.
+        const uri = process.env.NEO4J_URI;
+        if (!uri) {
+            throw new Error("[graph-viewer] NEO4J_URI unset — refusing to default to bolt://localhost:7687");
+        }
+        const user = process.env.NEO4J_USER ?? "neo4j";
+        const password = readPassword();
+        console.error(`[graph-viewer] resolved neo4j_uri=${uri}`);
+        driver = neo4j.driver(uri, neo4j.auth.basic(user, password));
+    }
+    return driver;
+}
+export function getSession() {
+    return getDriver().session();
+}
+export async function closeDriver() {
+    if (driver) {
+        await driver.close();
+        driver = null;
+    }
+}
+//# sourceMappingURL=neo4j.js.map

package/payload/platform/plugins/graph-viewer/mcp/dist/lib/neo4j.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"neo4j.js","sourceRoot":"","sources":["../../src/lib/neo4j.ts"],"names":[],"mappings":"AAAA,OAAO,KAAoC,MAAM,cAAc,CAAC;AAChE,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAEpC,IAAI,MAAM,GAAkB,IAAI,CAAC;AAEjC,SAAS,YAAY;IACnB,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc;QAAE,OAAO,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;IAClE,0CAA0C;IAC1C,kEAAkE;IAClE,oEAAoE;IACpE,MAAM,YAAY,GAAG,OAAO,CAC1B,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,gBAAgB,CAAC,EAC3E,wBAAwB,CACzB,CAAC;IACF,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;IACpD,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,yCAAyC,YAAY,gCAAgC,CACtF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,qEAAqE;QACrE,8CAA8C;QAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,+EAA+E,CAChF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,OAAO,CAAC;QAC/C,MAAM,QAAQ,GAAG,YAAY,EAAE,CAAC;QAChC,OAAO,CAAC,KAAK,CAAC,qCAAqC,GAAG,EAAE,CAAC,CAAC;QAC1D,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,UAAU;IACxB,OAAO,SAAS,EAAE,CAAC,OAAO,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW;IAC/B,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC"}

package/payload/platform/plugins/graph-viewer/mcp/dist/render/draw.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Canvas drawing for the graph-render tool. Takes a laid-out graph and
+ * produces a PNG buffer.
+ *
+ * Visual contract:
+ *   - Background matches the /graph page's surface colour (#FAFAF8).
+ *   - Node fill comes from platform/lib/graph-style's resolveNodeColour —
+ *     identical hue to the live page for the same labels.
+ *   - Node label is pickShortLabel from the same shared lib, rendered
+ *     below the node circle in a sans-serif fallback. Exact webfont match
+ *     is filed as a follow-up.
+ *   - Edges are thin grey lines with a small arrowhead. Edge type labels
+ *     are intentionally omitted — they crowd the canvas at high node
+ *     counts and the operator can drill into the live page if they need
+ *     them.
+ */
+import type { LayoutResult, LayoutNodeOut } from "./layout.js";
+export interface DrawNode extends LayoutNodeOut {
+    properties: Record<string, unknown>;
+}
+export interface DrawInput {
+    layout: LayoutResult;
+    nodeProperties: Record<string, Record<string, unknown>>;
+    width: number;
+    height: number;
+}
+export declare function drawGraph(input: DrawInput): Buffer;
+//# sourceMappingURL=draw.d.ts.map

package/payload/platform/plugins/graph-viewer/mcp/dist/render/draw.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"draw.d.ts","sourceRoot":"","sources":["../../src/render/draw.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAQH,OAAO,KAAK,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAW/D,MAAM,WAAW,QAAS,SAAQ,aAAa;IAC7C,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACrC;AAED,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,YAAY,CAAC;IAGrB,cAAc,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACxD,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,wBAAgB,SAAS,CAAC,KAAK,EAAE,SAAS,GAAG,MAAM,CAiDlD"}

package/payload/platform/plugins/graph-viewer/mcp/dist/render/draw.js

@@ -0,0 +1,73 @@
+/**
+ * Canvas drawing for the graph-render tool. Takes a laid-out graph and
+ * produces a PNG buffer.
+ *
+ * Visual contract:
+ *   - Background matches the /graph page's surface colour (#FAFAF8).
+ *   - Node fill comes from platform/lib/graph-style's resolveNodeColour —
+ *     identical hue to the live page for the same labels.
+ *   - Node label is pickShortLabel from the same shared lib, rendered
+ *     below the node circle in a sans-serif fallback. Exact webfont match
+ *     is filed as a follow-up.
+ *   - Edges are thin grey lines with a small arrowhead. Edge type labels
+ *     are intentionally omitted — they crowd the canvas at high node
+ *     counts and the operator can drill into the live page if they need
+ *     them.
+ */
+import { createCanvas } from "@napi-rs/canvas";
+import { resolveNodeColour, pickShortLabel, } from "../../../../../lib/graph-style/dist/index.js";
+const BACKGROUND = "#FAFAF8";
+const EDGE_COLOUR = "#C9C7C2";
+const NODE_RADIUS = 12;
+const NODE_STROKE = "#FFFFFF";
+const NODE_STROKE_WIDTH = 2;
+const LABEL_COLOUR = "#1A1A1A";
+const LABEL_FONT = "12px sans-serif";
+const LABEL_PADDING_Y = 4;
+export function drawGraph(input) {
+    const { layout, nodeProperties, width, height } = input;
+    const canvas = createCanvas(width, height);
+    const ctx = canvas.getContext("2d");
+    ctx.fillStyle = BACKGROUND;
+    ctx.fillRect(0, 0, width, height);
+    const nodeIndex = new Map();
+    for (const n of layout.nodes)
+        nodeIndex.set(n.id, n);
+    // Edges first, so node circles cover the endpoints.
+    ctx.strokeStyle = EDGE_COLOUR;
+    ctx.lineWidth = 1;
+    for (const e of layout.edges) {
+        const from = nodeIndex.get(e.from);
+        const to = nodeIndex.get(e.to);
+        if (!from || !to)
+            continue;
+        ctx.beginPath();
+        ctx.moveTo(from.x, from.y);
+        ctx.lineTo(to.x, to.y);
+        ctx.stroke();
+    }
+    // Nodes: filled circle, white stroke, label below.
+    ctx.font = LABEL_FONT;
+    ctx.textAlign = "center";
+    ctx.textBaseline = "top";
+    for (const n of layout.nodes) {
+        const { colour } = resolveNodeColour(n.labels);
+        ctx.fillStyle = colour;
+        ctx.beginPath();
+        ctx.arc(n.x, n.y, NODE_RADIUS, 0, Math.PI * 2);
+        ctx.fill();
+        ctx.lineWidth = NODE_STROKE_WIDTH;
+        ctx.strokeStyle = NODE_STROKE;
+        ctx.stroke();
+        const props = nodeProperties[n.id] ?? {};
+        const labelNode = {
+            id: n.id,
+            labels: n.labels,
+            properties: props,
+        };
+        ctx.fillStyle = LABEL_COLOUR;
+        ctx.fillText(pickShortLabel(labelNode), n.x, n.y + NODE_RADIUS + LABEL_PADDING_Y);
+    }
+    return canvas.toBuffer("image/png");
+}
+//# sourceMappingURL=draw.js.map

package/payload/platform/plugins/graph-viewer/mcp/dist/render/draw.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"draw.js","sourceRoot":"","sources":["../../src/render/draw.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAC/C,OAAO,EACL,iBAAiB,EACjB,cAAc,GAEf,MAAM,8CAA8C,CAAC;AAGtD,MAAM,UAAU,GAAG,SAAS,CAAC;AAC7B,MAAM,WAAW,GAAG,SAAS,CAAC;AAC9B,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,WAAW,GAAG,SAAS,CAAC;AAC9B,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,YAAY,GAAG,SAAS,CAAC;AAC/B,MAAM,UAAU,GAAG,iBAAiB,CAAC;AACrC,MAAM,eAAe,GAAG,CAAC,CAAC;AAe1B,MAAM,UAAU,SAAS,CAAC,KAAgB;IACxC,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IAC3C,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IAEpC,GAAG,CAAC,SAAS,GAAG,UAAU,CAAC;IAC3B,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IAElC,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IACnD,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK;QAAE,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAErD,oDAAoD;IACpD,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;IAC9B,GAAG,CAAC,SAAS,GAAG,CAAC,CAAC;IAClB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,IAAI,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACnC,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAC/B,IAAI,CAAC,IAAI,IAAI,CAAC,EAAE;YAAE,SAAS;QAC3B,GAAG,CAAC,SAAS,EAAE,CAAC;QAChB,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC;QAC3B,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;QACvB,GAAG,CAAC,MAAM,EAAE,CAAC;IACf,CAAC;IAED,mDAAmD;IACnD,GAAG,CAAC,IAAI,GAAG,UAAU,CAAC;IACtB,GAAG,CAAC,SAAS,GAAG,QAAQ,CAAC;IACzB,GAAG,CAAC,YAAY,GAAG,KAAK,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QAC7B,MAAM,EAAE,MAAM,EAAE,GAAG,iBAAiB,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;QAC/C,GAAG,CAAC,SAAS,GAAG,MAAM,CAAC;QACvB,GAAG,CAAC,SAAS,EAAE,CAAC;QAChB,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,GAAG,CAAC,IAAI,EAAE,CAAC;QACX,GAAG,CAAC,SAAS,GAAG,iBAAiB,CAAC;QAClC,GAAG,CAAC,WAAW,GAAG,WAAW,CAAC;QAC9B,GAAG,CAAC,MAAM,EAAE,CAAC;QAEb,MAAM,KAAK,GAAG,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;QACzC,MAAM,SAAS,GAAkB;YAC/B,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,MAAM,EAAE,CAAC,CAAC,MAAM;YAChB,UAAU,EAAE,KAAK;SAClB,CAAC;QACF,GAAG,CAAC,SAAS,GAAG,YAAY,CAAC;QAC7B,GAAG,CAAC,QAAQ,CAAC,cAAc,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,WAAW,GAAG,eAAe,CAAC,CAAC;IACpF,CAAC;IAED,OAAO,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;AACtC,CAAC"}

package/payload/platform/plugins/graph-viewer/mcp/dist/render/layout.d.ts

@@ -0,0 +1,40 @@
+/**
+ * Deterministic force-directed layout for the graph-render tool.
+ *
+ * Uses d3-force with a seeded LCG so the same input graph always produces
+ * the same node positions. Layout fidelity to the live /graph page (which
+ * runs vis-network's Barnes-Hut port in the browser) is NOT a goal —
+ * d3-force's many-body repulsion plus link spring forces give a coherent
+ * force-directed layout, which is what the operator needs to read the
+ * subgraph. Pixel-equivalence with /graph is filed as a follow-up task.
+ *
+ * Convergence: a fixed iteration count rather than a kinetic-energy
+ * threshold. The kinetic-energy approach is sensitive to graph topology
+ * (sparse graphs converge in 50 iterations, dense ones never stabilise
+ * cleanly), so 300 iterations is the simple, deterministic choice. The
+ * caller logs whether iteration completed successfully.
+ */
+export interface LayoutNodeIn {
+    id: string;
+    labels: string[];
+}
+export interface LayoutEdgeIn {
+    from: string;
+    to: string;
+    type: string;
+}
+export interface LayoutNodeOut extends LayoutNodeIn {
+    x: number;
+    y: number;
+}
+export interface LayoutResult {
+    nodes: LayoutNodeOut[];
+    edges: LayoutEdgeIn[];
+    iterations: number;
+}
+export declare function layoutGraph(nodes: LayoutNodeIn[], edges: LayoutEdgeIn[], opts: {
+    width: number;
+    height: number;
+    seed?: number;
+}): LayoutResult;
+//# sourceMappingURL=layout.d.ts.map

package/payload/platform/plugins/graph-viewer/mcp/dist/render/layout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.d.ts","sourceRoot":"","sources":["../../src/render/layout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAcH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,aAAc,SAAQ,YAAY;IACjD,CAAC,EAAE,MAAM,CAAC;IACV,CAAC,EAAE,MAAM,CAAC;CACX;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,aAAa,EAAE,CAAC;IACvB,KAAK,EAAE,YAAY,EAAE,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AA4BD,wBAAgB,WAAW,CACzB,KAAK,EAAE,YAAY,EAAE,EACrB,KAAK,EAAE,YAAY,EAAE,EACrB,IAAI,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GACrD,YAAY,CAmDd"}

package/payload/platform/plugins/graph-viewer/mcp/dist/render/layout.js

@@ -0,0 +1,77 @@
+/**
+ * Deterministic force-directed layout for the graph-render tool.
+ *
+ * Uses d3-force with a seeded LCG so the same input graph always produces
+ * the same node positions. Layout fidelity to the live /graph page (which
+ * runs vis-network's Barnes-Hut port in the browser) is NOT a goal —
+ * d3-force's many-body repulsion plus link spring forces give a coherent
+ * force-directed layout, which is what the operator needs to read the
+ * subgraph. Pixel-equivalence with /graph is filed as a follow-up task.
+ *
+ * Convergence: a fixed iteration count rather than a kinetic-energy
+ * threshold. The kinetic-energy approach is sensitive to graph topology
+ * (sparse graphs converge in 50 iterations, dense ones never stabilise
+ * cleanly), so 300 iterations is the simple, deterministic choice. The
+ * caller logs whether iteration completed successfully.
+ */
+import { forceSimulation, forceLink, forceManyBody, forceCenter, forceX, forceY, } from "d3-force";
+/**
+ * Seeded LCG (linear-congruential generator). Used as d3-force's
+ * randomSource so layout is deterministic across runs. Values are the
+ * Numerical Recipes constants — fast, adequate for jittering initial
+ * positions, not cryptographically interesting.
+ */
+function seededRandom(seed) {
+    let state = seed >>> 0;
+    return () => {
+        state = (state * 1664525 + 1013904223) >>> 0;
+        return state / 0x100000000;
+    };
+}
+const ITERATIONS = 300;
+const LINK_DISTANCE = 90;
+const CHARGE_STRENGTH = -240;
+const CENTER_STRENGTH = 0.05;
+export function layoutGraph(nodes, edges, opts) {
+    const seed = opts.seed ?? 1;
+    const rand = seededRandom(seed);
+    // Drop edges whose endpoints aren't in the node set — d3-force will
+    // throw on a missing endpoint, and the upstream Cypher might return
+    // edges whose far side was capped off by the truncation cut.
+    const nodeIds = new Set(nodes.map((n) => n.id));
+    const validEdges = edges.filter((e) => nodeIds.has(e.from) && nodeIds.has(e.to));
+    // Initial positions: jittered around the centre. d3-force will
+    // displace them over the iteration count.
+    const cx = opts.width / 2;
+    const cy = opts.height / 2;
+    const simNodes = nodes.map((n) => ({
+        id: n.id,
+        labels: n.labels,
+        x: cx + (rand() - 0.5) * 40,
+        y: cy + (rand() - 0.5) * 40,
+    }));
+    const simLinks = validEdges.map((e) => ({
+        source: e.from,
+        target: e.to,
+        type: e.type,
+    }));
+    const simulation = forceSimulation(simNodes)
+        .randomSource(rand)
+        .force("link", forceLink(simLinks)
+        .id((d) => d.id)
+        .distance(LINK_DISTANCE))
+        .force("charge", forceManyBody().strength(CHARGE_STRENGTH))
+        .force("center", forceCenter(cx, cy))
+        .force("x", forceX(cx).strength(CENTER_STRENGTH))
+        .force("y", forceY(cy).strength(CENTER_STRENGTH))
+        .stop();
+    simulation.tick(ITERATIONS);
+    const outNodes = simNodes.map((n) => ({
+        id: n.id,
+        labels: n.labels,
+        x: n.x ?? cx,
+        y: n.y ?? cy,
+    }));
+    return { nodes: outNodes, edges: validEdges, iterations: ITERATIONS };
+}
+//# sourceMappingURL=layout.js.map

package/payload/platform/plugins/graph-viewer/mcp/dist/render/layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"layout.js","sourceRoot":"","sources":["../../src/render/layout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,eAAe,EACf,SAAS,EACT,aAAa,EACb,WAAW,EACX,MAAM,EACN,MAAM,GAIP,MAAM,UAAU,CAAC;AAwBlB;;;;;GAKG;AACH,SAAS,YAAY,CAAC,IAAY;IAChC,IAAI,KAAK,GAAG,IAAI,KAAK,CAAC,CAAC;IACvB,OAAO,GAAG,EAAE;QACV,KAAK,GAAG,CAAC,KAAK,GAAG,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QAC7C,OAAO,KAAK,GAAG,WAAW,CAAC;IAC7B,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,GAAG,GAAG,CAAC;AACvB,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,eAAe,GAAG,CAAC,GAAG,CAAC;AAC7B,MAAM,eAAe,GAAG,IAAI,CAAC;AAS7B,MAAM,UAAU,WAAW,CACzB,KAAqB,EACrB,KAAqB,EACrB,IAAsD;IAEtD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAEhC,oEAAoE;IACpE,oEAAoE;IACpE,6DAA6D;IAC7D,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChD,MAAM,UAAU,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAEjF,+DAA+D;IAC/D,0CAA0C;IAC1C,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC;IAC1B,MAAM,EAAE,GAAG,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC;IAC3B,MAAM,QAAQ,GAAc,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5C,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE;QAC3B,CAAC,EAAE,EAAE,GAAG,CAAC,IAAI,EAAE,GAAG,GAAG,CAAC,GAAG,EAAE;KAC5B,CAAC,CAAC,CAAC;IAEJ,MAAM,QAAQ,GAAc,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACjD,MAAM,EAAE,CAAC,CAAC,IAAI;QACd,MAAM,EAAE,CAAC,CAAC,EAAE;QACZ,IAAI,EAAE,CAAC,CAAC,IAAI;KACb,CAAC,CAAC,CAAC;IAEJ,MAAM,UAAU,GAAiC,eAAe,CAAC,QAAQ,CAAC;SACvE,YAAY,CAAC,IAAI,CAAC;SAClB,KAAK,CACJ,MAAM,EACN,SAAS,CAAmB,QAAQ,CAAC;SAClC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACf,QAAQ,CAAC,aAAa,CAAC,CAC3B;SACA,KAAK,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;SAC1D,KAAK,CAAC,QAAQ,EAAE,WAAW,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;SACpC,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;SAChD,KAAK,CAAC,GAAG,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,eAAe,CAAC,CAAC;SAChD,IAAI,EAAE,CAAC;IAEV,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAE5B,MAAM,QAAQ,GAAoB,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrD,EAAE,EAAE,CAAC,CAAC,EAAE;QACR,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;QACZ,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE;KACb,CAAC,CAAC,CAAC;IAEJ,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,KAAK,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;AACxE,CAAC"}

package/payload/platform/plugins/graph-viewer/mcp/dist/tools/graph-render.d.ts

@@ -0,0 +1,45 @@
+/**
+ * graph-render — produce an inline PNG of an account-scoped Neo4j
+ * subgraph rooted at a given nodeId, walking up to `hopDepth` hops.
+ *
+ * Surface contract:
+ *   - The root node must exist and belong to the caller's account.
+ *     A missing or foreign-account root returns a structured refusal,
+ *     never throws.
+ *   - The expansion is bounded by both `hopDepth` (max 3 to keep the
+ *     image legible) and a hard 200-node cap. Subgraphs that exceed
+ *     the cap render the first 200 nodes and carry a `truncated`
+ *     envelope so the agent can tell the operator.
+ *   - `:Trashed` nodes are excluded everywhere — matches memory-search.
+ *   - One observability line per invocation, prefixed `[graph-render]`.
+ *
+ * The Cypher hopDepth is INLINED into the query string after a strict
+ * validate (`Number.isInteger && 0 <= n <= 3`) because Neo4j does not
+ * parameterise variable-length path bounds. Anything outside that range
+ * fails fast at the param-validation layer, well before string assembly.
+ */
+export interface GraphRenderParams {
+    accountId: string;
+    nodeId: string;
+    hopDepth: number;
+}
+export interface GraphRenderRefusal {
+    ok: false;
+    reason: "scope" | "empty" | "cap-exceeded" | "draw-error" | "invalid-input";
+    message: string;
+}
+export interface GraphRenderSuccess {
+    ok: true;
+    pngBase64: string;
+    width: number;
+    height: number;
+    nodeCount: number;
+    edgeCount: number;
+    truncated?: {
+        rendered: number;
+        total: number;
+    };
+}
+export type GraphRenderResult = GraphRenderSuccess | GraphRenderRefusal;
+export declare function graphRender(params: GraphRenderParams): Promise<GraphRenderResult>;
+//# sourceMappingURL=graph-render.d.ts.map

package/payload/platform/plugins/graph-viewer/mcp/dist/tools/graph-render.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph-render.d.ts","sourceRoot":"","sources":["../../src/tools/graph-render.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAWH,MAAM,WAAW,iBAAiB;IAChC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,KAAK,CAAC;IACV,MAAM,EAAE,OAAO,GAAG,OAAO,GAAG,cAAc,GAAG,YAAY,GAAG,eAAe,CAAC;IAC5E,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,IAAI,CAAC;IACT,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;CACjD;AAED,MAAM,MAAM,iBAAiB,GAAG,kBAAkB,GAAG,kBAAkB,CAAC;AAMxE,wBAAsB,WAAW,CAC/B,MAAM,EAAE,iBAAiB,GACxB,OAAO,CAAC,iBAAiB,CAAC,CAkK5B"}